# collab.land-discord.com — SUSPICIOUS

> collab.land-discord.com is a live crypto drainer scam impersonating Discord. Verify the domain on PhishDestroy before entering wallet credentials or connecting.

## Summary
PhishDestroy identifies collab.land-discord.com as an active crypto drainer scam leveraging Discord branding to deceive users into connecting malicious wallets. The domain mimics the legitimate Collab.Land platform, a known crypto wallet verification tool for Discord servers, to trick victims into authorizing crypto transfers. This campaign is currently distributing phishing links under the generic threat type ‘generic_phishing’ and remains under active investigation due to its potential for rapid financial theft.

Technical indicators confirm this domain was created on March 24, 2026, resolving to IP address 188.114.97.3 and registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain uses a Let’s Encrypt SSL certificate to appear legitimate and currently shows 0/95 detections on VirusTotal, indicating it has evaded automated detection systems. Google Safe Browsing (GSB) status and blocklist inclusion remain unverified at this time, leaving users exposed to unmitigated risk.

As of the latest analysis, collab.land-discord.com remains active with a status of ‘active’ and a seed of 7ec73b. This domain poses a high risk due to its use of Discord impersonation and crypto wallet drainer functionality. Users are strongly advised to verify any Collab.Land-related links using PhishDestroy before entering credentials or connecting wallets. Immediate action is required to block this domain and prevent financial loss. Remaining risk is assessed as high pending further takedown or blacklisting efforts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-24 19:19:56
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ac65ece0-83e8-4b32-8b3d-f2701437ff2f
- PhishDestroy: https://phishdestroy.io/domain/collab.land-discord.com/
- LLM endpoint: https://phishdestroy.io/domain/collab.land-discord.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/collab.land-discord.com/
Last updated: 2026-03-28